verydows records

7 published records for vendor verydows.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2019-7737No exploit	A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit.verydows · verydows · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Feb 11, 2019
35Monitor	CVE-2020-23363No exploit	Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code viverydows · verydows · CWE-352 pre-auth RCE CSRF	High8.8	—	0.3%	May 9, 2023
35Monitor	CVE-2023-51949No exploit	Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controllerverydows · verydows · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Jan 12, 2024
32Monitor	CVE-2022-28058No exploit	Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.verydows · verydows · CWE-22 Path traversal	High8.1	—	1.2%	Apr 26, 2022
32Monitor	CVE-2022-28059No exploit	Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.verydows · verydows · CWE-22 Path traversal	High8.1	—	1.2%	Apr 26, 2022
24Monitor	CVE-2019-8363No exploit	Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.verydows · verydows · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Feb 16, 2019
24Monitor	CVE-2019-7753No exploit	Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.verydows · verydows · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Feb 12, 2019

CVE-2019-7737
35Monitor
A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
verydows · verydowsFeb 11, 2019
CVE-2020-23363
35Monitor
Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code vi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- CSRF
verydows · verydowsMay 9, 2023
CVE-2023-51949
35Monitor
Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controller
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
verydows · verydowsJan 12, 2024
CVE-2022-28058
32Monitor
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.
HighCVSS 8.1No exploitEPSS 1%
- Path traversal
verydows · verydowsApr 26, 2022
CVE-2022-28059
32Monitor
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\database_controller.php.
HighCVSS 8.1No exploitEPSS 1%
- Path traversal
verydows · verydowsApr 26, 2022
CVE-2019-8363
24Monitor
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
verydows · verydowsFeb 16, 2019
CVE-2019-7753
24Monitor
Verydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
verydows · verydowsFeb 12, 2019